Privacy Policy

ASOCIACIÓN EDUCACIÓN Y SALUD (AES) (hereinafter, “the Controller”) is the data controller of personal data and the owner of the website https://breakfree.fit/ (hereinafter, “the Website”).

The Controller guarantees the protection of all personal data provided by users on the Website.

In accordance with the above, you are informed that:

In compliance with Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights, as well as current data protection regulations under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), by completing this form you give your explicit consent for your personal data to be collected and processed in a record of processing activities maintained under the responsibility of the Controller.

For clients, the processing of personal data is based on the execution of a contract.

Data Controller Identification

Controller: ASOCIACIÓN EDUCACIÓN Y SALUD (AES)

Tax ID (CIF): G81343402

Address: Pradillo 6, Polígono Industrial La Mina – 28770 Colmenar Viejo, Madrid

Email: info@educacionysalud.es

Purposes and Data Retention

By completing the forms and other communication methods available on the Website, the user gives their explicit consent for the requested personal data to be incorporated and processed in the record of personal data processing activities created for this purpose and maintained under the responsibility of the Controller.

For the purposes of current legislation, the personal data you submit through the website forms will be processed as data of “Website users” and/or “clients and suppliers”.

The legal basis for processing your data is: your consent. Prior consent from users is always required to process their personal data for the stated purposes.

The personal data provided will be retained: until the data subject requests its deletion.

No special categories of protected data are processed on the Website.

This Website includes an SSL certificate. This is a security protocol that ensures your data is transmitted securely and in full integrity; that is, the transmission of data between the server and the web user is fully encrypted.

Data collection forms, purposes, and retention periods

The data collection forms, their purposes, and retention periods are as follows:

  • Collection and automated processing of personal data as a result of browsing the Website pages (you may consult the cookies policy).
  • Customer relationship management. Data will be retained for the time necessary for processing. Contracts and invoices will be retained for five and ten years, respectively.
  • Handling, managing, and responding to inquiries, questions, proposals, quote requests, and any other information requested by the user (contact form).
    Personal data for this purpose is provided via the contact form.
    Retention period: for the duration necessary to manage the inquiry.
  • Through the aforementioned contact form, personal data is also collected and processed automatically as a result of inquiries, requests, or subscriptions to any of the services offered by the Website owner.
    Retention period: for the duration of the processing, unless the user exercises their right to deletion earlier.
  • WhatsApp contact. The purpose is to respond to inquiries and questions raised by the user through this channel.
    Retention period: for the duration of the processing, unless the user exercises their right to deletion earlier.
  • Google Analytics tracking systems, used to analyze user preferences, demographic characteristics, traffic patterns, and other aggregated information to better understand the audience and their needs. This tracking also helps us display more relevant advertising.
  • Due to the use of Google Fonts on the Website, some data such as the IP address may be processed to provide the service correctly.
  • Facebook Ads, used to attract subscribers and customers. When creating ads, audiences may be segmented by location, demographics, interests, etc. Therefore, data obtained through this platform will be subject to this privacy policy from the moment the user provides their data to subscribe to our community newsletter.
  • Additionally, remarketing is carried out to associate a specific audience (users who have previously visited the Website) with targeted messages, with the aim of encouraging them to return to the Website.


This information is collected via Facebook cookies, which can be disabled through the Network Advertising Initiative.

Mandatory nature of data

The data requested through the Website is mandatory, as it is necessary to provide an optimal service. If all required data is not provided, it cannot be guaranteed that the information and services will fully meet your needs.

The Controller does not share, sell, or rent your personal information to third parties. However, certain information may be shared with authorized third-party service providers when necessary to deliver specific services.

Legal Basis for the Processing of Personal Data

The processing of personal data carried out by the Controller through its Website is based on consent. Such consent is explicit, freely given, specific, informed, and unambiguous.

Appropriate security measures have been implemented in the collection and processing of personal data to prevent loss, unauthorized access, or misuse, in accordance with the applicable legislation mentioned above.

The Controller undertakes to protect any confidential information to which it has access.

Recipients

The Controller undertakes that personal data will not be shared or transferred to third parties without the users’ express consent. However, the provision of certain services may require the transfer of data to third countries or entities for infrastructure management or service provision purposes, such as email newsletter management. In such cases, it is guaranteed that the data will be hosted within the European Union, thereby ensuring compliance with the General Data Protection Regulation (GDPR).

In the event of data transfers to countries outside the European Union:

  • Standard contractual clauses are in place to ensure the lawful transfer of personal data to third countries.
  • Explicit consent will be required, after informing the user of the potential risks, due to the absence of an adequacy decision and appropriate safeguards, in accordance with Article 49 of the GDPR.
  • Companies involved may adhere to the EU-US Data Privacy Framework (DPF).Hosting services are provided by Webempresa (WEBEMPRESA EUROPA S.L.), whose headquarters are located in Madrid. Personal data is processed on servers located within the EU. More information about Webempresa’s privacy policy can be found at: https://www.webempresa.com/aviso-legal.html


Under no circumstances will the transfer of such data involve uses that exceed the consent granted for the purposes and conditions set out in this Privacy Policy.

If you provide personal data of third parties without informing the Controller, you do so with their express consent and having previously informed them of the contents of this clause. Likewise, you are requested to inform us of any changes to the data provided.

The Controller is not responsible for the transfer of third-party data where such individuals have not given their consent or are unaware of this clause. Responsibility lies with the person providing such data.

If the required data is not provided, the website services may not be fully available. Failure to provide required data in contact forms may prevent the proper delivery of requested services. Refusal to accept the cookie policy may result in the loss of certain website functionalities.

The user certifies that they are over 14 years of age and therefore have the legal capacity to provide consent for the processing of their personal data, in accordance with this Privacy Policy.

Users may exercise their ARCO-POL rights (access, rectification, erasure, objection, portability, and limitation of processing) at any time by contacting:

  • Email: info@educacionysalud.es
  • Postal address: Pradillo 6, Polígono Industrial La Mina – 28770 Colmenar Viejo, Madrid

Data subjects have the right to receive the personal data concerning them, which they have provided to a Controller, in a structured, commonly used, and machine-readable format, and to transmit those data to another Controller without hindrance.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case it will only be retained for the establishment, exercise, or defense of legal claims.

Where consent has been given for a specific purpose, the user has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

Data subjects may lodge a complaint with the competent Data Protection Authority if they are not satisfied with the exercise of their rights.

The express consent given when contracting the Controller’s services also includes the following:

  • The Controller reserves the right to subcontract employees for the provision of various services necessary for the proper development and organization of the website’s activities.
  • The Controller also reserves the right to engage third parties for the management of legal matters in general, and data protection matters in particular. In all such cases, the Controller will require the contracted company or professional, as well as those responsible for data processing, to sign a data confidentiality agreement to ensure privacy.

The user consents to the disclosure of their personal data when required by competent administrative authorities or by court order.

The user authorizes the processing of their personal data under the terms set out in this clause.

The Controller reserves the right to modify this Privacy Policy to adapt it to legislative or case law developments, as well as industry practices. In such cases, changes will be announced on this page with reasonable notice prior to their implementation.

Processing of Client Data

Complete Information on Data Protection

Who is responsible for processing your data?

Data Controller: ASOCIACIÓN EDUCACIÓN Y SALUD (AES)

Tax ID (CIF): G81343402

Address: Pradillo 6, Polígono Industrial La Mina – 28770 Colmenar Viejo, Madrid.

Email: info@educacionysalud.es

For what purpose do we process your personal data?

The processing of personal data carried out by the Controller aims to manage the administrative, accounting, and tax aspects of the requested services, as well as to send commercial communications about our products and services. If you do not provide your personal data, we will not be able to fulfill the functionalities described above.

No automated decisions will be made based on the data provided.

How long will we retain your data?

The data will be retained until the data subject requests its deletion, and, where applicable, for the years necessary to comply with legal obligations.

What is the legal basis for processing your data?

We inform you of the legal basis for processing your data:

  • Performance of a contract: To carry out the administrative, accounting, and tax management of the requested services
  • Legitimate interest of the Controller: To send commercial communications about our products and services

To whom will your data be disclosed?

Data will be disclosed to the following recipients:

  • Tax Authorities, for the purpose of complying with legal obligations
  • Financial Institutions, for the purpose of processing the corresponding payments

Transfers of data to third countries

No transfers of data to third countries are planned.

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defense of legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, the Controller will cease processing the data, except for compelling legitimate grounds or for the exercise or defense of possible claims.

You may exercise your rights by contacting us via email at info@educacionysalud.es or by post at Pradillo 6, Polígono Industrial La Mina – 28770 Colmenar Viejo, Madrid.

When commercial communications are sent based on the Controller’s legitimate interest, the data subject may object to the processing of their data for that purpose.

If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

If you believe that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Authority via its website: www.aepd.es.

How have we obtained your data?

The personal data processed by the Controller comes from: The data subject.

Categories of data processed:

  • Identification data
  • Postal and electronic addresses
  • Commercial information

Processing of Data of Potential Clients and Web Contacts

Who is responsible for processing your data?

Data Controller: ASOCIACIÓN EDUCACIÓN Y SALUD (AES)

Tax ID (CIF): G81343402

Address: Pradillo 6, Polígono Industrial La Mina – 28770 Colmenar Viejo, Madrid.

Email: info@educacionysalud.es

 

For what purpose do we process your personal data?

The processing of personal data carried out by the Controller aims to respond to your request and send you commercial communications, including by electronic means. If you do not provide your personal data, we will not be able to fulfill the functionalities described above.

No automated decisions will be made based on the data provided.

How long will we retain your data?

The data will be retained until the data subject requests its deletion.

What is the legal basis for processing your data?

We inform you of the legal basis for processing your data:

  • Performance of a contract: To handle your request
  • Consent of the data subject: To send you commercial communications, including by electronic means

To whom will your data be disclosed?

No data will be disclosed to third parties, except where legally required.

Transfers of data to third countries

No transfers of data to third countries are planned.

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defense of legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, the Controller will cease processing the data, except for compelling legitimate grounds or for the exercise or defense of possible claims.

You may exercise your rights by contacting info@educacionysalud.es by email or by post at Pradillo 6, Polígono Industrial La Mina – 28770 Colmenar Viejo, Madrid.

When commercial communications are sent based on the Controller’s legitimate interest, the data subject may object to the processing of their data for that purpose.

If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

If you believe that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Authority via its website: www.aepd.es.

How have we obtained your data?

The personal data processed by the Controller comes from: the data subject.

Processing of Supplier Data

Who is responsible for processing your data?

Data Controller: ASOCIACIÓN EDUCACIÓN Y SALUD (AES)

Tax ID (CIF): G81343402

Address: Pradillo 6, Polígono Industrial La Mina – 28770 Colmenar Viejo, Madrid.

Email: info@educacionysalud.es

 

For what purpose do we process your personal data?

The processing of personal data carried out by the Controller aims to carry out the administrative, accounting, and tax management of the contracted services, as well as manage contact persons. If you do not provide your personal data, we will not be able to fulfill the functionalities described above.

No automated decisions will be made based on the data provided.

How long will we retain your data?

The data will be retained until the data subject requests its deletion, and, where applicable, for the years necessary to comply with legal obligations.

What is the legal basis for processing your data?

We inform you of the legal basis for processing your data:

  • Performance of a contract: To carry out the administrative, accounting, and tax management of the contracted services, as well as manage contact persons

To whom will your data be disclosed?

Data will be disclosed to the following recipients:

  • Tax Authorities, for the purpose of complying with legal obligations
  • Financial Institutions, for the purpose of making the corresponding payments

Transfers of data to third countries

No transfers of data to third countries are planned.

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defense of legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, the Controller will cease processing the data, except for compelling legitimate grounds or for the exercise or defense of possible claims.

You may exercise your rights by contacting info@educacionysalud.es by email or by post at Pradillo 6, Polígono Industrial La Mina – 28770 Colmenar Viejo, Madrid.

When commercial communications are sent based on the Controller’s legitimate interest, the data subject may object to the processing of their data for that purpose.

If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

If you believe that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Authority via its website: www.aepd.es.

How have we obtained your data?

The personal data processed by the Controller comes from: The data subject.